Water Sector Physical Threat Briefing: Utilizing Penetration Testing to Strengthen Your Utility’s Physical Security Posture
January 21, 2026 2:00 pm
On January 21 at 2 pm ET, WaterISAC will convene the next event in its quarterly Water Sector Physical Threat Briefings series. Presenters from Loudoun Water and DirectDefense will discuss penetration testing and how utilities can leverage these tests to enhance their physical security program. Utilities of all sizes face an increasingly complex physical threat landscape, with a widening range of threat actors seeking to gain unauthorized access to sensitive water infrastructure. Amid this heightened threat environment, penetration testing is a critical security best practice because it allows utilities to proactively identify vulnerabilities in their physical and cyber defenses before malicious actors can exploit them. Through controlled assessments that simulate real-world attack scenarios utilities gain a clearer understanding of their true security posture. The insights from penetration testing help prioritize investments, refine incident response plans, and ensure that both physical and cyber defenses work as intended. To help owners and operators gain a better appreciation of penetration testing, WaterISAC is excited to welcome Lenny McDonald, Manager-Risk, Safety & Security for Loudon Water, who will discuss his utility’s recent experience conducting penetration tests, lessons learned, and how his utility plans to enhance its physical security posture going forward. Following that, Jesse Rodriguez, Principal Security Consultant with DirectDefense, will detail how his company conducts penetration tests, provide an overview of common vulnerabilities he sees at critical infrastructure organizations, and ways to mitigate them. Don’t miss this opportunity to learn how your peers are working to strengthen their physical security posture. Members Only.
2025 Threat Analysis Report – Special Webinar
January 28, 2026 2:00 pm
Join the WaterISAC analyst team for an exclusive dive into the key findings from the 2025 Threat Analysis Report. This special webinar brings the experts behind the report directly to you—covering the most significant cyber, physical, and operational threats affecting water and wastewater utilities in the year ahead. During this session, WaterISAC analysts will: Break down the top threat trends identified across the sector Share real-world insights from recent incidents and intelligence reporting Highlight emerging risks utilities should be preparing for now Provide practical recommendations to strengthen resilience in 2025 Answer your questions live during an interactive Q&A Whether you’re responsible for cybersecurity, physical security, operations, emergency management, or risk planning, this webinar will give you actionable intelligence to inform your strategy for the year. Don’t miss this opportunity to hear directly from the analysts who monitor threats to the water sector every day.
Water Sector Natural Disaster Threat Briefing
February 11, 2026 2:00 pm
On Feb 11, WaterISAC will convene its quarterly Water Sector Natural Disaster Threat Briefing. Presenters will discuss natural hazards impacting the water and wastewater sector. WaterISAC members only.
H2OEx- Aurora, CO
February 19, 2026 8:00 am
In today’s rapidly evolving threat landscape, water and wastewater utilities face unprecedented challenges—from sophisticated cyberattacks and physical security breaches to critical supply chain disruptions. Is your utility ready to respond? This exclusive, in-person Tabletop Exercise (TTX) is more than just a training—it’s a strategic opportunity to build resilience, improve response readiness, and forge essential connections. Tailored by EPA Region, each session delivers current threat briefings and actionable insights directly from those on the front lines. Whether you’re a utility operator, cybersecurity expert, or emergency manager, attending this event equips you with the tools, knowledge, and partnerships your utility needs to safeguard public health and critical infrastructure. Don’t wait for a crisis to test your preparedness—join us and be ready.
H2OSecCon- Virtual Conference
May 12, 2026 11:00 am
In an era where cyber and physical threats to critical infrastructure are rapidly evolving, H2OSecCon stands as the premier virtual conference dedicated to fortifying the security of the water and wastewater sector. This essential event brings together top industry experts, thought leaders, and innovators to tackle the most pressing security challenges facing water utilities today.
